$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: Hy8LmW3kp3lgivdmQlHfE3rcAubPN6UQ9nVk7Ew0MDU= Subject key identifier: 23:22:2F:5A:26:7E:8D:8F:23:30:14:1D:6F:D9:98:86:62:BE:8E:08 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 741C3E9EE2BDAB3485DDC706D1DCEF65DA0FE2B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: C2 Signing time: Sat 06 Sep 2025 18:31:46 +0000 Manifest this update: Sat 06 Sep 2025 18:26:46 +0000 Manifest next update: Tue 09 Sep 2025 20:45:46 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) 2: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: yD5skpDMYbgcu5vuckWQ1/dp4gIGhNSCf5fbdJ9YIWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:1c:3e:9e:e2:bd:ab:34:85:dd:c7:06:d1:dc:ef:65:da:0f:e2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Sep 6 18:26:46 2025 GMT Not After : Sep 9 20:45:46 2025 GMT Subject: CN=23222F5A267E8D8F2330141D6FD9988662BE8E08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:ad:8e:39:96:f2:b6:10:48:eb:eb:d5:45: fb:7d:25:44:6b:04:d8:4d:11:e8:b6:7d:f4:47:fa: b8:f7:cc:5b:41:83:45:fa:6a:ad:7c:1b:21:b5:2e: ba:ca:13:18:51:42:9e:0e:ff:d5:0b:9f:73:e0:b8: 22:66:24:f0:61:68:8e:5f:d1:97:90:34:0a:b3:85: 8d:2d:4c:5c:68:40:f5:00:d6:18:89:7f:1e:63:3d: 67:91:ab:ea:57:de:1d:0c:13:53:7c:31:a2:1d:fd: 9c:f5:07:6c:13:dc:62:83:7a:e6:e0:aa:0e:8b:d3: 87:b1:1d:71:05:a8:a0:3a:1d:46:00:a2:00:82:72: 0b:9c:86:e5:9e:e7:06:ea:bf:af:61:97:7f:b4:43: 58:f6:a7:2f:7c:d0:8b:29:6c:bd:ae:83:66:b7:c9: 44:75:2c:b1:8b:a4:dd:80:55:e0:54:97:dd:9e:bc: 4e:79:77:94:7f:a5:b8:d0:0d:bd:3b:c0:42:bb:df: 12:14:ee:33:dd:2c:05:9c:f9:b4:53:c9:c3:d1:85: d4:9e:da:95:0e:c9:d4:6f:28:e5:a0:ff:89:e7:57: 2e:ea:4d:df:46:0d:c4:c5:d1:fd:e0:f3:1e:75:8e: e0:36:52:6d:fe:70:ea:ea:3a:f5:a2:8d:ca:32:e2: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:22:2F:5A:26:7E:8D:8F:23:30:14:1D:6F:D9:98:86:62:BE:8E:08 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:96:57:ff:12:1b:ce:38:6a:b5:f4:61:aa:84:8c:41:2d:2b: e0:49:0a:2a:ae:6e:2a:0c:ab:3c:bf:fa:7a:68:2e:cb:83:51: ba:d1:08:35:b3:16:ed:f7:14:f6:31:e6:53:6b:68:57:00:79: 08:8a:4c:12:94:77:04:e1:ce:d9:a4:a4:18:88:18:65:11:a7: f1:1e:7f:42:09:28:9c:6e:cb:5b:fd:90:b4:de:c1:13:ec:3d: 37:d9:55:38:8a:41:16:d6:d6:7f:1c:04:13:97:38:16:18:a5: 2a:a9:ab:9a:92:10:1d:03:08:44:2a:bb:85:47:1b:51:32:86: e6:d3:61:46:0f:16:05:b4:5b:43:7b:28:c7:15:7b:ff:df:22: 3e:20:cf:76:78:dd:1d:14:e7:64:f9:43:00:56:24:d6:23:1a: 82:6a:86:d9:df:1b:fd:ba:ff:0f:e1:a5:00:cf:15:2a:9b:5d: 06:b5:31:7b:7a:1d:90:68:8c:dd:3c:79:7a:da:90:91:45:60: b2:b0:d3:e4:5a:cb:8a:c5:b7:7b:6a:51:f6:1d:40:5c:97:b8: f8:eb:27:8f:ee:50:e2:15:51:f9:65:f0:80:a0:94:7e:80:f6: cf:56:6e:65:1a:50:e2:df:45:39:13:81:9d:65:07:73:04:de: b0:94:1b:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdBw+nuK9qzSF3ccG0dzvZdoP4rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTA5MDYxODI2NDZaFw0yNTA5MDkyMDQ1NDZaMDMxMTAvBgNV BAMTKDIzMjIyRjVBMjY3RThEOEYyMzMwMTQxRDZGRDk5ODg2NjJCRThFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYIa2OOZbythBI6+vVRft9JURr BNhNEei2ffRH+rj3zFtBg0X6aq18GyG1LrrKExhRQp4O/9ULn3PguCJmJPBhaI5f 0ZeQNAqzhY0tTFxoQPUA1hiJfx5jPWeRq+pX3h0ME1N8MaId/Zz1B2wT3GKDeubg qg6L04exHXEFqKA6HUYAogCCcguchuWe5wbqv69hl3+0Q1j2py980IspbL2ug2a3 yUR1LLGLpN2AVeBUl92evE55d5R/pbjQDb07wEK73xIU7jPdLAWc+bRTycPRhdSe 2pUOydRvKOWg/4nnVy7qTd9GDcTF0f3g8x51juA2Um3+cOrqOvWijcoy4o8DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIyIvWiZ+jY8jMBQdb9mYhmK+jggwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuWV/8SG844arX0YaqEjEEtK+BJCiqubioM qzy/+npoLsuDUbrRCDWzFu33FPYx5lNraFcAeQiKTBKUdwThztmkpBiIGGURp/Ee f0IJKJxuy1v9kLTewRPsPTfZVTiKQRbW1n8cBBOXOBYYpSqpq5qSEB0DCEQqu4VH G1EyhubTYUYPFgW0W0N7KMcVe//fIj4gz3Z43R0U52T5QwBWJNYjGoJqhtnfG/26 /w/hpQDPFSqbXQa1MXt6HZBojN08eXrakJFFYLKw0+Ray4rFt3tqUfYdQFyXuPjr J4/uUOIVUfll8ICglH6A9s9WbmUaUOLfRTkTgZ1lB3ME3rCUGwo= -----END CERTIFICATE-----Generated at Mon Sep 8 05:08:57 2025 by rpki-client